Unspecified Vulnerability in Oracle E-Business Suite
CVE-2016-5517
5.5MEDIUM
Summary
The Oracle Applications DBA component in Oracle E-Business Suite 12.1.3 has an unspecified vulnerability that allows local users to compromise confidentiality. This is achieved through various vectors related to AD Utilities, potentially leading to unauthorized access to sensitive information. It is crucial for organizations utilizing this product to assess their systems and implement necessary mitigation strategies to protect against potential exploitation.
References
CVSS V3.1
Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved